$ rpki-client -vvvf rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.mft File: ymLkOPmNhRjS8qXZ9nZWUeWtpg4.mft (raw, json) Hash identifier: qc2HvDXcNbUnqTubsCGKJXx6CE7YX/kORLZYFqj/pEw= Subject key identifier: 38:C6:E0:A7:C2:B3:31:59:26:CC:08:85:33:91:EA:E6:4E:F8:95:C2 Authority key identifier: CA:62:E4:38:F9:8D:85:18:D2:F2:A5:D9:F6:76:56:51:E5:AD:A6:0E Certificate issuer: /CN=A9168BA2/serialNumber=CA62E438F98D8518D2F2A5D9F6765651E5ADA60E Certificate serial: 0BE4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.mft Manifest number: 0BC3 Signing time: Tue 22 Sep 2026 18:56:36 +0000 Manifest this update: Tue 22 Sep 2026 18:56:35 +0000 Manifest next update: Tue 29 Sep 2026 18:56:35 +0000 Files and hashes: 1: ymLkOPmNhRjS8qXZ9nZWUeWtpg4.crl (hash: pqr4B7dJ04+YHHt2G64ayXXVZKMM8JKKh2QWjwe+MxI=) 2: A2AF0622853711EFA09C892EC4F9AE02.roa (hash: OLS2n2bCipeK2cJAKKmNcGHacmpb1F1CGfou3xcKoRw=) 3: BA7B024C04D811EDBE98F982C4F9AE02.roa (hash: Qrs9ea1Ryt4mplsCkDhjHp70Ezhx/br174uLvjICktg=) 4: EF29C95E69C311EF82BCE77AC4F9AE02.roa (hash: wATgHFFEBhvghT6gMqTJTC0PonsBt+Ml1sqdhxwQAPg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.crl rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 18:56:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3044 (0xbe4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168BA2, serialNumber=CA62E438F98D8518D2F2A5D9F6765651E5ADA60E Validity Not Before: Sep 22 18:56:35 2026 GMT Not After : Sep 29 18:56:35 2026 GMT Subject: CN=6ab2cf64-96ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:94:56:e2:29:b1:23:33:93:98:b5:69:f8:d7: 65:ec:b1:a5:c6:91:1e:0a:0d:ad:64:86:92:c7:82: aa:84:6f:a3:67:b1:a6:25:ad:00:6e:67:fd:49:ad: 82:f9:8f:b9:d9:18:ef:2b:81:12:a2:3e:8e:90:ef: 71:90:88:35:59:6c:cc:34:5a:79:c7:9b:88:c6:7e: 38:76:66:58:c5:dd:04:2d:d0:bb:1d:bd:1d:2b:06: 60:d1:8b:11:a7:96:fd:d7:ab:1c:0f:f1:38:81:08: 7a:0e:37:14:dc:57:c5:f9:5e:04:4b:7e:b2:80:6c: 20:e8:4a:27:b8:20:a5:f4:2e:12:e1:2e:f1:cd:21: 97:18:02:82:10:fe:d9:b1:f9:7b:6b:9c:ad:db:9f: df:78:c6:00:ab:40:dc:b2:86:cf:b3:4f:46:1b:41: 87:a6:d7:e5:df:2e:a0:b6:ee:50:d9:04:fd:fb:33: 22:a5:60:3c:7d:83:a9:96:2d:c8:4f:24:2b:e0:a9: 0b:8b:8f:7a:e0:de:8c:81:6b:3a:1e:f5:e7:79:7b: 8c:a2:9d:8b:37:10:32:b3:df:ee:c0:e7:ad:58:74: 83:e9:fd:d3:d7:f9:02:ab:17:e3:93:40:ab:be:0b: 0f:53:2d:b1:28:26:68:5c:29:f0:da:57:bf:27:8f: f8:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:C6:E0:A7:C2:B3:31:59:26:CC:08:85:33:91:EA:E6:4E:F8:95:C2 X509v3 Authority Key Identifier: keyid:CA:62:E4:38:F9:8D:85:18:D2:F2:A5:D9:F6:76:56:51:E5:AD:A6:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:8c:ea:0c:ac:53:01:f8:82:ba:be:4c:80:36:c5:5e:b8:05: 50:b7:ea:89:69:54:33:71:ee:f6:9d:ca:61:63:f9:a3:85:81: 23:ff:37:70:6e:88:f3:de:79:aa:a7:a0:b3:56:b6:99:45:53: 97:fb:05:57:42:d0:19:e7:ee:33:01:95:31:2c:a9:2e:65:2e: d5:01:e8:f8:b6:cc:27:83:e1:03:d1:95:f7:65:a7:cd:40:88: f3:cb:19:05:65:38:f6:e3:5d:01:59:46:da:b1:d0:57:ba:9d: 0e:53:1d:e7:60:9d:3f:c2:49:e8:11:e3:74:99:77:9a:fa:4d: 55:24:4e:47:c4:4b:c2:8a:7c:35:89:e6:7c:9e:64:d1:52:27: fc:d4:e5:bb:ce:e2:0a:52:27:b3:38:2f:b7:6e:27:32:12:2e: 04:ad:ca:52:6c:4a:a0:9f:bb:c4:c8:15:b4:15:b1:dc:59:11: e9:d2:d0:ba:a4:78:b0:3e:52:f4:c9:52:24:27:93:06:21:64: f3:1b:98:99:06:6f:ff:fb:24:4f:95:8b:d0:5c:94:85:89:10: 5e:19:51:b7:eb:4f:4f:00:85:55:6d:c9:e4:0c:eb:e0:58:2e: 01:a4:bf:8b:80:19:6a:1b:bd:2f:09:5f:0c:d0:d0:bb:1e:d0: 4f:68:e9:8f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC+QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhCQTIxMTAvBgNVBAUTKENBNjJFNDM4Rjk4RDg1MThEMkYyQTVEOUY2NzY1NjUx RTVBREE2MEUwHhcNMjYwOTIyMTg1NjM1WhcNMjYwOTI5MTg1NjM1WjAYMRYwFAYD VQQDEw02YWIyY2Y2NC05NmFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAopRW4imxIzOTmLVp+Ndl7LGlxpEeCg2tZIaSx4KqhG+jZ7GmJa0Abmf9Sa2C +Y+52RjvK4ESoj6OkO9xkIg1WWzMNFp5x5uIxn44dmZYxd0ELdC7Hb0dKwZg0YsR p5b916scD/E4gQh6DjcU3FfF+V4ES36ygGwg6EonuCCl9C4S4S7xzSGXGAKCEP7Z sfl7a5yt25/feMYAq0DcsobPs09GG0GHptfl3y6gtu5Q2QT9+zMipWA8fYOpli3I TyQr4KkLi4964N6MgWs6HvXneXuMop2LNxAys9/uwOetWHSD6f3T1/kCqxfjk0Cr vgsPUy2xKCZoXCnw2le/J4/4PQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDjG4KfC szFZJswIhTOR6uZO+JXCMB8GA1UdIwQYMBaAFMpi5Dj5jYUY0vKl2fZ2VlHlraYO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEJBMi85OURGMzg2MjU0 QzQxMUVBODRGNEU3MkRDNEY5QUUwMi95bUxrT1BtTmhSalM4cVhaOW5aV1VlV3Rw ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ltTGtPUG1OaFJqUzhxWFo5blpXVWVXdHBnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OEJBMi85OURGMzg2MjU0QzQxMUVBODRGNEU3MkRDNEY5QUUwMi95bUxrT1BtTmhS alM4cVhaOW5aV1VlV3RwZzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATozqDKxTAfiCur5MgDbFXrgFULfqiWlUM3Hu9p3KYWP5o4WBI/83cG6I8955 qqegs1a2mUVTl/sFV0LQGefuMwGVMSypLmUu1QHo+LbMJ4PhA9GV92WnzUCI88sZ BWU49uNdAVlG2rHQV7qdDlMd52CdP8JJ6BHjdJl3mvpNVSROR8RLwop8NYnmfJ5k 0VIn/NTlu87iClInszgvt24nMhIuBK3KUmxKoJ+7xMgVtBWx3FkR6dLQuqR4sD5S 9MlSJCeTBiFk8xuYmQZv//skT5WL0FyUhYkQXhlRt+tPTwCFVW3J5Azr4FguAaS/ i4AZahu9LwlfDNDQux7QT2jpjw== -----END CERTIFICATE-----Generated at Wed Sep 23 09:24:55 2026 by rpki-client